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AMENDMENTS TO THE CLAIMS 



1 1 . (Currently Amended) A directory-enabled network element , comprising: 

2 a directory enabling element installed in and executed by the network element, 

3 wherein the network element is any one of a packet router and a data switch 

4 capable of manipulating packets at any of Open System Interconnection (OSD 

5 Layer 2 and 3, wherein the directory enabling element is configured to query, 

6 access, and update directory information that is managed by a directory 

7 service of a network that includes the network element, wherein the directory 

8 service is any one of a Lightweight Directory Access Protocol (LDAP) 

9 directory and an X.500 directory; 

10 an application programming interface coupled to the directory enabling element and 

11 configured to receive directory services requests from application programs 

12 and provide the directory services requests to the directory enabling element, 

13 wherein the application programs are hosted in the network element; and 

14 a locator service coupled to the directory enabling element and accessible using the 

15 application programming interface and configured to enable the application 

16 programs to locate servers that provide the directory services in the network . 

1 2. (Canceled) 

1 3. (Canceled) 

1 4. (Canceled) 
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1 5. (Currently Amended) A directory-enabled network element as recited in Claim 1, 

2 further comprising[[:]] 

3 a dir e ctory e nabling el e ment install e d in and e x e cut e d by th e n e twork e l e m e nt, and 

4 configur e d to qu e ry, access, and updat e dir e ctory information that is manag e d 

5 by a dir e ctory s e r\dc e of a n e twork that includ e s th e n e twork e l e m e nt; 

6 a bind service in the directory enabling element and coupled to a security protocol 

7 and configured to bind an extemal application program to the security 

8 protocol. 

1 6. (Currently Amended) A directory-enabled network element as recited in Claim 21, 

2 further comprising a Unicode translation service configured to query, access, and 

3 update directory information that is encoded in a Unicode intemational character 

4 format. 

1 7. (Currently Amended) A directory-enabled network element as recited in Claim 1, 

2 further comprising[[:]] 

3 a dir e ctory e nabling e l e m e nt install e d in and e x e cut e d by th e n e twork e l e m e nt, and 

4 configur e d to qu e ry, acc e ss, and updat e dir e ctory information that is manag e d 

5 by a dir e ctory s e rvic e of a n e twork that includ e s th e n e twork e l e m e nt; 

6 a locator s e r\dc e coupl e d to th e dir e ctory e nabling e l e m e nt and configur e d to locat e 

7 s e rv e rs that provid e th e dir e ctory s e rvic e s in th e n e twork; 

8 an event service coupled to the directory enabling element and configured to receive 

9 registration of an event and an associated responsive action from an 
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10 application program, notify the application program when the event occurs, 

1 1 and execute the associated responsive action in response thereto. 

1 8. (Canceled) 

1 9. (Currently Amended) A directory-enabled network element as recited in Claim 1, 

2 further comprising[[" : ] ] 

3 a dir e ctory e nabling e l e m e nt install e d in and e x e cut e d by th e n e twork e l e m e nt, and 

4 configur e d to qu e ry, acc e ss, and updat e directory information that is manag e d 

5 by a directory s e rvic e of a n e twork that includ e s th e n e twork e l e m e nt; 

6 a locator s e rvic e coupl e d to th e dir e ctory e nabling elem e nt and configur e d to locat e 

7 s e rv e rs that provid e the dir e ctory s e rvic e s in th e n e twork; 

8 a group policy interface coupled to the directory enabling element and configured to 

9 receive and update the directory service with one or more definitions of 

10 directory services policies that apply to groups of network devices in the 

1 1 network. 

1 10. (Currently Amended) A directory-enabled network element as recited in Claim 1, 

2 further comprising: 

3 a dir e ctory e nabling e l e m e nt install e d in and execut e d by th e network e l e m e nt, and 

4 configur e d to qu e ry, acc e ss, and update dir e ctory information that is manag e d 

5 by a dir e ctory s e rvic e of a n e twork that includ e s th e n e twork e lement; 
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6 a bind service in the directory enabling element and coupled to an security protocol 

7 and configured to bind an external application program to the security 

8 protocol; and 

9 an event service coupled to the directory enabling element and accessible using the 

10 application programming interface and configured to receive registration of an 

1 1 event and an associated responsive action from an application program, notify 

12 the application program when the event occurs, and execute the associated 

1 3 responsive action in response thereto. 

1 11. (Currently Amended) A directory-enabled packet router for a packet-sv^itched 

2 network , vyherein the packet router comprises a directory enabling element installed 

3 in and executed by the packet router, v^herein the packet router is capable of 

4 manipulating packets at any of Open System Interconnection (OSD Layer 2 and 3, 

5 wherein the directory enabling element is configured to query, access, and update 

6 directory information that is managed by a directory service of the packet-switched 

7 network, wherein the directory service is any one of a Lightweight Directory Access 

8 Protocol (LDAP) directory and an X. 5 00 directory . 

1 12. (Currently Amended) A directory-enabled packet router as recited in Claim 1 1 , 

2 further comprising: 

3 a dir e ctory e nabling e l e m e nt install e d in and e x e cut e d by th e rout e r, and configur e d to 

4 qu e ry, acc e ss, and updat e dir e ctory information that is manag e d by a dir e ctory 

5 s e rvic e of a n e twork that includ e s th e rout e r; 
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6 a bind service in the directory enabling element and coupled to a security protocol 

7 and configured to bind an application program to the security protocol: and 

8 an event service coupled to the directory enabling element and accessible using the 

9 application programming interface and configured to receive registration of an 

10 event and an associated responsive action from an application program, notify 

1 1 the application program when the event occurs, and execute the associated 

12 responsive action in response thereto. 

1 13. (Currently Amended) A directory-enabled network data switch for a packet-switched 

2 network , wherein the data switch comprises a directory enabling element installed in 

3 and executed by the data switch, wherein the data switch is capable of manipulating 

4 packets at any of Open System Interconnection (OSf) Layer 2 and 3, wherein the 

5 directory enabling element is configured to query, access, and update directory 

6 information that is managed by a directory service of the packet-switched network. 

7 wherein the directory service is any one of a Lightweight Directory Access Protocol 

8 (LDAP) directory and an X.500 directory . 

1 14. (Currently Amended) A directory-enabled network data switch as recited in Claim 

2 13. further comprising: 

3 a dir e ctory e nabling e l e m e nt install e d in and e x e cut e d by th e switch, and configur e d 

4 to qu e ry, acc e ss, and updat e dir e ctory information that is manag e d by a 

5 dir e ctory s e rvic e of a n e twork that includ e s th e switch; 

6 a bind service in the directory enabling element and coupled to a security protocol 

7 and configured to bind an application program to the security protocol; and 
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8 an event service coupled to the directory enabling element and accessible using the 

9 application programming interface and configured to receive registration of an 

10 event and an associated responsive action from an application program, notify 

1 1 the application program when the event occurs, and execute the associated 

12 responsive action in response thereto. 

1 15. (Canceled) 

1 16. (Currently Amended) A computer-readable medium carrying one or more sequences 

2 of instructions for using a directory-enabled network element to qu e ry, acc e ss, or 

3 updat e dir e ctory information of a dir e ctory s e rvic e of a n e twork that includ e s th e 

4 dir e ctory e nabl e d n e twork e lem e nt , wherein execution of the one or more sequences 

5 of instructions by one or more processors causes the one or more processors to 

6 perform the steps of: 

7 creating and storing a directory enabling element installed in and executed by the 

8 network element, wherein the network element is any one of a packet router 

9 and a data switch capable of manipulating packets at any of Open System 

10 hiterconnection (OSI) Layer 2 and 3, a nd wherein the directory enabling 

1 1 element is configured to query, access, and update directory information that 

12 is managed by a directory service of a network that includes the network 

13 element , wherein the directory service is any one of a Lightweight Directory 

14 Access Protocol (LDAP) directory and an X.500 directory ; 

1 5 binding fee an application program to the a_security protocol; 
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16 creating an event and an associated responsive action that are associated with the 

17 application program; and 

18 in response to occurrence of the event, executing the responsive action, obtaining 

19 poUcy information from the directory service, and converting the policy 

20 information into one or more commands that are executable by the directory- 

2 1 enabled network element. 

1 17. (Original) A computer-readable medium as recited in Claim 16, wherein execution of 

2 the one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the further steps of: 

4 locating a nearest directory server and binding the application program to the nearest 

5 directory server that is located; 

6 locating a nearest event server and binding the application program to the nearest 

7 event server that is located. 

1 18. (Original) A computer-readable medium as recited in Claim 16, wherein execution of 

2 the one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the fiirther steps of: 

4 translating the policy information into one or more values that are ready to apply to a 

5 router, whereby a virtual private network is created between the router and 

6 another network device. 
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1 19. (Original) A computer-readable medium as recited in Claim 16, wherein execution of 

2 the one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the further steps of: 

4 translating the policy information into one or more values that are ready to apply to a 

5 set of internal data structures of a router, by calhng one or more internal NOS 

6 API functions, whereby a dynamic ERSEC configuration is created that 

7 connects the router and at least one other network device. 

1 20. (Original) A computer-readable medium as recited in Claim 16, wherein execution of 

2 the one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the further steps of establishing an application 

4 programming interface coupled to the directory enabling element and configured to 

5 receive directory services requests from application programs and provide the 

6 directory services requests to the one or more processors. 



(Currently Amended) A directory services-enabled network element , comprising: 
a directory enabling element installed in and executed by the network element. 



3 wherein the network element is any one of a packet router and a data switch 

4 capable of manipulating packets at any of Open System Interconnection (OS!) 

5 Layer 2 and 3, wherein the directory enabling element is configured to query, 

6 access, and update directory information that is managed by directory services 

7 of a network that includes the network element, wherein the directory services 

8 include at least one of a Lightweight Directory Access Protocol (LDAP) 

9 directory and an X.500 directory; and 
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10 a locator service coupled to the directory enabling element and configured to locate 

11 servers that provide the directory services in the network . 

1 22. (Currently Amended) A system comprising a network element enabled to 

2 automatically interface with directory services in a network, wherein the network 

3 element comprises: 

4 a directory enabling element installed in and executed by the network element, 

5 wherein the network element is any one of a packet router and a data packet 

6 switch capable of manipulating packets at any of Open System 

7 Interconnection (OSD Layer 2 and 3, wherein the directory enabling element 

8 ' is configured to query, access, and update directory information that is 

9 managed by directory services of the network that includes the network 

10 element, wherein the directory services include at least one of a Lightweight 

11 Directory Access Protocol (LDAP) directory and an X.500 directory: and 

12 a locator service coupled to the directory enabling element and configured to locate 

13 servers that provide the directory services in the network . 

1 23. (Previously Presented) The system of claim 22, wherein the network element obtains 

2 policy information fi-om the directory services and updates the directory service. 

1 24. (Previously Presented) The system of claim 22, wherein the network element 

2 includes a protocol agent for interfacing with the directory services. 

1 25. (Canceled) 
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1 26. (Canceled) 
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